diff options
author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-12-21 21:17:39 -0600 |
---|---|---|
committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-12-21 21:17:39 -0600 |
commit | 51f39cbf4f18ad2d9ddb05f07aa6992a3960eab3 (patch) | |
tree | 86e94011a160d3bb507ac9c4a2bb058621d7a80a /tests/test_x509.py | |
parent | a04e032be907759af8d5b838fc94d581c49b484a (diff) | |
download | cryptography-51f39cbf4f18ad2d9ddb05f07aa6992a3960eab3.tar.gz cryptography-51f39cbf4f18ad2d9ddb05f07aa6992a3960eab3.tar.bz2 cryptography-51f39cbf4f18ad2d9ddb05f07aa6992a3960eab3.zip |
support parsing CRL extensions in the OpenSSL backend
Diffstat (limited to 'tests/test_x509.py')
-rw-r--r-- | tests/test_x509.py | 22 |
1 files changed, 17 insertions, 5 deletions
diff --git a/tests/test_x509.py b/tests/test_x509.py index 27ce21e2..8d943225 100644 --- a/tests/test_x509.py +++ b/tests/test_x509.py @@ -175,14 +175,26 @@ class TestCertificateRevocationList(object): def test_extensions(self, backend): crl = _load_cert( - os.path.join("x509", "custom", "crl_all_reasons.pem"), - x509.load_pem_x509_crl, + os.path.join("x509", "PKITS_data", "crls", "GoodCACRL.crl"), + x509.load_der_x509_crl, backend ) - # CRL extensions are currently not supported in the OpenSSL backend. - with pytest.raises(NotImplementedError): - crl.extensions + crl_number = crl.extensions.get_extension_for_oid( + ExtensionOID.CRL_NUMBER + ) + aki = crl.extensions.get_extension_for_class( + x509.AuthorityKeyIdentifier + ) + assert crl_number.value == 1 + assert crl_number.critical is False + assert aki.value == x509.AuthorityKeyIdentifier( + key_identifier=( + b'X\x01\x84$\x1b\xbc+R\x94J=\xa5\x10r\x14Q\xf5\xaf:\xc9' + ), + authority_cert_issuer=None, + authority_cert_serial_number=None + ) def test_signature(self, backend): crl = _load_cert( |